Overview

overview

3

Static

static

1

_TicketID_...t .msg

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    _TicketID_VO Connect (PTY) LTD EFT-Statement .msg
  • Size 494KB
  • Sample261006-raq2gay12q
  • SHA256 1dbd644f6db9d58895778a0757a40438e4db21d225f5da8e81764e15b2281713
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • _TicketID_VO Connect (PTY) LTD EFT-Statement .msg
    .msg 494KB
  • image.png
    .gif 212KB

_TicketID_VO Connect (PTY) LTD EFT-Statement .msg

  • SHA256 1dbd644f6db9d58895778a0757a40438e4db21d225f5da8e81764e15b2281713
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 6 Oct 2026 13:43:19 +0000

Subject

<TicketID>VO Connect (PTY) LTD EFT-Statement

Content-Type

application/ms-tnef; name="winmail.dat"

Received

from VI0PR08MB12011.eurprd08.prod.outlook.com (2603:10a6:800:345::5) by AS8PR08MB7208.eurprd08.prod.outlook.com with HTTPS; Tue, 6 Oct 2026 13:43:33 +0000

from AS8PR08MB7911.eurprd08.prod.outlook.com (2603:10a6:20b:509::15) by VI0PR08MB12011.eurprd08.prod.outlook.com (2603:10a6:800:345::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.14; Tue, 6 Oct 2026 13:43:19 +0000

from AS8PR08MB7911.eurprd08.prod.outlook.com ([fe80::4630:f1:aa7b:9a85]) by AS8PR08MB7911.eurprd08.prod.outlook.com ([fe80::4630:f1:aa7b:9a85%7]) with mapi id 15.21.0496.010; Tue, 6 Oct 2026 13:43:19 +0000

Message-Id

<AS8PR08MB7911346E630115AFD72B4A52EF952@AS8PR08MB7911.eurprd08.prod.outlook.com>